Does Finpliq support MTD VAT?

Finpliq includes UK VAT workflows that help connected users prepare, review and submit MTD VAT returns where the relevant HMRC connection and permissions are configured.

Does Finpliq submit filings automatically?

No. Finpliq is designed around review, approval and evidence workflows. Users remain responsible for checking records and authorising filings.

Is Finpliq built for UK small businesses?

Yes. Finpliq is built for UK sole traders, contractors, small companies and CIS businesses that need plain-English bookkeeping and compliance workflows.

← Policy library

Security

Logging & Monitoring Policy

How Finpliq records important activity without exposing sensitive data.

Owner: Security & Operations
Effective from: 8 July 2026
Last reviewed: 8 July 2026
Review cycle: Annual or following material change

Download Word copy Static HTML copy

At a glance

Finpliq logs security, authentication, admin and filing events for accountability.

Logs must not include passwords, MFA secrets, recovery codes, raw HMRC secrets or payment card data.

Full policy

Audit logs should cover login-sensitive events, admin role changes, MFA events, filing actions, approvals, high-risk exports, business switching and security incidents where implemented.

Monitoring should help identify failed logins, repeated MFA failures, unusual admin activity, filing errors, service failures and supplier outages.

Log access must be restricted to authorised administrators and support/security personnel.